diff options
author | Mark Haines <mark.haines@matrix.org> | 2014-11-04 15:57:23 +0000 |
---|---|---|
committer | Mark Haines <mark.haines@matrix.org> | 2014-11-04 15:57:23 +0000 |
commit | 89ba802b23bf1fd22afbc5e9a4b3b732264e3c18 (patch) | |
tree | 34b7803cf8dfb570165c1b1c6f674dc5ca4476c7 /syweb/webclient/CAPTCHA_SETUP | |
parent | Merge pull request #11 from matrix-org/webclient-room-data-restructure (diff) | |
download | synapse-89ba802b23bf1fd22afbc5e9a4b3b732264e3c18.tar.xz |
Move webclient to a python module so that it can be installed
Diffstat (limited to 'syweb/webclient/CAPTCHA_SETUP')
-rw-r--r-- | syweb/webclient/CAPTCHA_SETUP | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/syweb/webclient/CAPTCHA_SETUP b/syweb/webclient/CAPTCHA_SETUP new file mode 100644 index 0000000000..ebc8a5f3b0 --- /dev/null +++ b/syweb/webclient/CAPTCHA_SETUP @@ -0,0 +1,46 @@ +Captcha can be enabled for this web client / home server. This file explains how to do that. +The captcha mechanism used is Google's ReCaptcha. This requires API keys from Google. + +Getting keys +------------ +Requires a public/private key pair from: + +https://developers.google.com/recaptcha/ + + +Setting Private ReCaptcha Key +----------------------------- +The private key is a config option on the home server config. If it is not +visible, you can generate it via --generate-config. Set the following value: + + recaptcha_private_key: YOUR_PRIVATE_KEY + +In addition, you MUST enable captchas via: + + enable_registration_captcha: true + +Setting Public ReCaptcha Key +---------------------------- +The web client will look for the global variable webClientConfig for config +options. You should put your ReCaptcha public key there like so: + +webClientConfig = { + useCaptcha: true, + recaptcha_public_key: "YOUR_PUBLIC_KEY" +} + +This should be put in webclient/config.js which is already .gitignored, rather +than in the web client source files. You MUST set useCaptcha to true else a +ReCaptcha widget will not be generated. + +Configuring IP used for auth +---------------------------- +The ReCaptcha API requires that the IP address of the user who solved the +captcha is sent. If the client is connecting through a proxy or load balancer, +it may be required to use the X-Forwarded-For (XFF) header instead of the origin +IP address. This can be configured as an option on the home server like so: + + captcha_ip_origin_is_x_forwarded: true + + + |